Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          ZYFAWeAeJZOYJxckUYLONcoba5lfT2Gtk0VunLh5PZE=
Subject key identifier:   14:2E:02:A5:8C:F2:62:A8:46:CD:2D:EF:51:7A:E8:44:E9:97:D9:0E
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       019E1E34E318E092B95BE3669CB086B3D8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          1269
Signing time:             Tue 12 May 2026 22:00:42 +0000
Manifest this update:     Tue 12 May 2026 22:00:42 +0000
Manifest next update:     Wed 13 May 2026 22:00:42 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          3: VsCifY8XLUBVZAJIXlh4tHs6Tys.roa (hash: yx2cdHQ3fO2iayrPEdicOAnB23aOaGWVWINVVkpgEOY=)
                          4: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: g0xag3zNqqT8FRqF8z1L3ORi6kN2NX6S8fbKqzye4oA=)
                          5: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
                          6: ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa (hash: QvdoLk4yxysIF/RBd4WT88j/9RIybsVbv3Yb9pLmzK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:e3:18:e0:92:b9:5b:e3:66:9c:b0:86:b3:d8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: May 12 22:00:42 2026 GMT
            Not After : May 13 22:00:42 2026 GMT
        Subject: CN=142e02a58cf262a846cd2def517ae844e997d90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:2a:1f:c0:8d:af:02:28:7b:4b:53:a4:d2:
                    f0:e7:da:51:a5:05:38:12:cf:94:da:b7:26:1e:75:
                    43:b0:fe:19:2b:7e:38:9f:5d:7f:40:2e:ca:e2:c1:
                    10:80:7d:cc:11:c8:e0:e1:7e:48:95:39:33:cd:9b:
                    c4:9c:a5:a8:b3:11:73:0e:e2:5f:b4:d0:a9:c2:e7:
                    f4:94:b4:35:ea:9d:22:08:04:8f:ae:95:80:28:b3:
                    dd:eb:ac:d8:f8:bf:62:67:27:6f:fe:ef:33:9b:fa:
                    8f:fa:d4:59:3c:ff:96:14:bd:8c:df:f1:f7:86:ea:
                    49:f9:6b:2f:56:49:e7:5d:2f:f2:24:d2:54:22:43:
                    d7:42:56:67:ff:44:b1:e6:92:0e:72:92:a5:e0:cd:
                    75:41:6e:1c:0a:39:f1:e8:96:2f:38:1f:fa:ee:b7:
                    f4:80:2c:6d:28:63:52:52:73:91:4f:34:88:bf:df:
                    87:c6:28:7a:0f:8c:71:bc:f0:50:e7:10:fd:9a:9f:
                    dc:40:17:fd:f1:cb:4a:2b:b8:4c:25:bf:e2:ae:4a:
                    52:14:a3:d1:03:46:29:bd:2b:3f:e2:6e:8e:70:fa:
                    03:11:19:86:f4:89:2c:9d:2b:8a:1e:ea:9a:2f:aa:
                    54:ee:46:d8:53:4c:13:5b:b1:8b:64:fd:67:18:a7:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2E:02:A5:8C:F2:62:A8:46:CD:2D:EF:51:7A:E8:44:E9:97:D9:0E
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fb:b2:50:2e:6d:66:83:66:66:8d:b7:cd:95:25:6f:33:07:
         91:b9:21:1d:0d:d1:69:a1:31:1a:fa:b1:e8:fa:cd:c6:50:c9:
         90:ed:be:51:3c:4a:c2:61:e8:bd:74:42:4d:2c:24:d2:a0:61:
         e7:f7:c5:93:0b:83:3e:99:af:f8:39:48:64:b4:a1:43:5b:c9:
         7f:ac:f7:9f:11:b2:9b:f1:7d:ba:77:7a:da:44:c1:b9:02:e6:
         ec:a6:42:36:ce:97:b3:52:73:18:6c:4c:d6:36:ea:80:bd:79:
         70:dd:f5:3a:ae:78:f9:3d:1c:9d:16:f9:64:cb:0b:e1:43:6b:
         c5:ce:01:3e:01:07:2f:d4:f4:53:23:e6:11:f2:28:ff:25:61:
         3e:ca:08:eb:fa:9c:bb:a8:5d:5b:71:3f:1f:c9:ec:8e:17:33:
         cf:43:a7:ae:87:fb:6b:05:79:c4:f1:3d:48:c1:48:33:bc:1d:
         96:09:48:64:aa:19:f9:16:85:59:49:e7:50:ca:31:49:a5:14:
         70:e9:8b:8d:b4:59:80:1f:0c:07:10:34:4a:f3:49:f9:86:48:
         ea:a9:17:62:b7:04:92:4a:ad:e1:6c:a5:48:db:19:b6:b3:dc:
         f1:45:96:a1:16:44:b2:ac:a6:9d:6b:f1:16:07:be:ec:cc:16:
         e1:96:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:33 2026 by rpki-client